9745e7d00cc696c8c8a1b66bfa79db80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9745e7d00cc696c8c8a1b66bfa79db80
Size

14KB
MD5

9745e7d00cc696c8c8a1b66bfa79db80
SHA1

e0c8fe0908eb20be1a4393705d917ce4e91b76c9
SHA256

ce15ec80d4021fdd9b49b2bd8415c1aa8bb6e14dd0fdf5a1a8aba16fe2add9bc
SHA512

762aa88c7adc482b80a95e24f2247bfd2eb88f48fe82e1d044a8d44e45eb7a0cfb2e3d11548306132f214c9a9f3faeffd44e55470ed7074235fb6fc04ae6837d
SSDEEP

384:KjwCwNmAesMkUsufvOS/TOKVQ+JrC3pSDD:KgVes6sul/9VQ+9CQ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9745e7d00cc696c8c8a1b66bfa79db80

Files

9745e7d00cc696c8c8a1b66bfa79db80
.exe windows:4 windows x86 arch:x86

13a809d93f2817c3577718634c11a7b0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

ws2_32

setsockopt

user32

wsprintfA

advapi32

OpenServiceA

msvcp60

??1_Winit@std@@QAE@XZ

msvcrt

rand

Sections

.text
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xjc0R5j0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ